Maybe just passthrough the error message from the API rather than having a copy of the string here? The API passes back more than just one error (in this case, the user could be non-existent which would be a different error from this.